Docker Security Hardening

Enforce Docker and container security best practices based on Bret Fisher's container security recommendations, the OWASP Docker Security Cheat Sheet, and CIS Docker Benchmark.

When to Use

• Creating or editing any Dockerfile
• Writing or modifying docker-compose.yml / compose.yaml
• Configuring Kubernetes deployments with container specs
• Setting up CI/CD pipelines that build Docker images
• Reviewing container configurations before production deployment
• When the user mentions "container security", "Docker hardening", "image scanning", or "production readiness"

Security Checklist — Apply to Every Docker File

Dockerfile Requirements (Check All)